~/catalog/security//plugin.json

SecurityGitHub source

security guidance

Name: /plugin.json
Author: David Dworken

/plugin.json

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25

David Dworken

★33.6k

June 5, 2026

Apache-2.0

// plugin content

Plugin indexed from GitHub. Source description: Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that detects injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes. Detected version: 2.0.3

// original public source

anthropics/claude-plugins-official

/plugins/security-guidance/.claude-plugin/plugin.json

License: Apache-2.0

Independent project, not affiliated with Anthropic. This plugin remains the property of its original author.

open_in_newView GitHub source flagRequest removal

// install this plugin

Paste this command in your terminal at the root of your project:

mkdir -p .claude/commands && curl -o ".claude/commands/plugin.json" "https://raw.githubusercontent.com/anthropics/claude-plugins-official/main/plugins/security-guidance/.claude-plugin/plugin.json"

Then in Claude Code, type /plugin.json to activate it.

open_in_newOpen original source

menu_bookHow do I install a plugin?